AI governance MCP server β policy enforcement, skills, memory, multi-LLM consensus
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Author: Stephane Korning Β· 2026 Β· MIT + Commons Clause
Version: v1.0.0 Β· May 2026
The governance layer for AI coding agents.
Every agent action classified, gated, and cryptographically logged β regardless of which LLM or tool runs it.
Your AI coding agents can write code. They can commit, push, delete, refactor.
But who's watching them?
Claude Code has no audit trail. Aider trusts the user. Codex sandboxes everything and hopes for the best. LangChain gives you building blocks but no guardrails.
Agence exists because advisory guardrails aren't guardrails at all. It's the layer that sits between any AI agent and your filesystem and says "not without approval."
Agence is an agent-agnostic governance stack for software engineering. It doesn't replace your coding agent β it governs, orchestrates, and audits all of them from a single control plane.
Command Gating β Every shell command is classified before execution:
| Tier | Gate | Example |
|---|---|---|
| T0 | Auto-execute | git status, ls, cat |
| T1 | Logged | git add, git commit |
| T2 | Human approval required | git push, git reset |
| T3 | Blocked | rm -rf, chmod 777, kill |
Unknown commands default to T2. Not T0. Fail-closed. The guard runs as a separate process β agents cannot bypass their own policy.
Cryptographic Audit β Every agent decision is logged to a Merkle-chained, append-only ledger. Each entry links to the previous via SHA-256. Tamper with one entry and the chain breaks. Verify with: agence ^ledger verify.
Multi-Agent Orchestration β 18 agents across 4 types (persona, tool, loop, ensemble). Route with @agent syntax. Override models with dot-notation: @ralph.gpt4o. Dispatch to Aider, Claude Code, Copilot, or your own tools β all governed by the same policy.
Peer Consensus β Route any question to 3 independent LLMs and get weighted consensus. Your architecture review shouldn't depend on one model's blind spots.
Session Persistence β Save, resume, and hand off sessions between agents. Full context survives restarts. Automatic tmux capture of stdout/stdin/stderr β no 16KB buffer limits.
Git-Native β No database. No server. State lives in git worktrees and flat files. Knowledge is sharded, gated, and selectively routed β you decide what gets shared.
| 30,701 | Lines of production code (23.9K TypeScript + 6.8K bash) |
| 751 | Tests with 1,768 assertions across 21 files |
| 279 | Security-specific tests (guard + hardening + SEC regressions) |
| 9 | Red-team cycles completed (SEC-008 through SEC-019) |
| 33+ | Orchestration skills (^fix, ^review, ^hack, ^peers, ^vault...) |
| 18 | Registered agents (10 persona, 5 tool, 1 loop, 2 ensemble) |
| 12 | LLM providers (Anthropic, OpenAI, Azure, Google, Mistral, Groq, Ollama...) |
| 10 | MCP tools + 3 MCP resources (Model Context Protocol server) |
| 3 | Dependencies total (MCP SDK, Bun, Zod) |
| 0 | Databases required |
rm -rfAgence governs all of the above.
Gate AI agent commands in any CI workflow β one step, zero infrastructure:
| Input | Description | Default |
|---|---|---|
command | Shell command to classify | required |
policy | Path to custom AIPOLICY.yaml (repo-relative) | bundled policy |
agent | Agent identity for MLS capability checks | ci |
fail_on_block | Exit 1 on T3 (deny) | true |
fail_on_escalate | Exit 1 on T2 (requires approval) | false |
| Output | Values |
|---|---|
tier | T0 Β· T1 Β· T2 Β· T3 |
action | allow Β· flag Β· escalate Β· deny |
reason | Human-readable decision |
rule | Matched policy rule |
See docs/marketplace/description.md for full documentation.
This PR starts with the GitHub Action path first for fast per-repo adoption; the GitHub App listing and webhook server can follow in a later phase or separate PR for org-level rollout across many repositories.
For enterprise adoption, the next layer after the GitHub App is shard onboarding so orgs can separate teams, policies, and knowledge boundaries cleanly instead of forcing one shared shard model.
| Tool | Required | Install |
|---|---|---|
bash 4+ | Yes | Built-in on Linux/macOS/WSL |
git 2.30+ | Yes | sudo apt install git |
bun 1.3+ | Yes | bun.sh |
tmux | For swarm | sudo apt install tmux |
jq | For ledger queries | sudo apt install jq |
Windows: Use WSL (Ubuntu recommended).
COGNOS β Four pillars:
| Pillar | Purpose | Location |
|---|---|---|
| CODEX | Immutable governance β Laws, Principles, Rules, AIPOLICY | codex/ |
| KNOWLEDGE | Team-shared docs, lessons, plans β selectively routed via @ symlinks | knowledge/ |
| NEXUS | Local operational state β sessions, ledger, signals | nexus/ (gitignored) |
| ORGANIC | Swarm orchestration β tasks, workflows, matrix scheduling | organic/ |
Runtime: Bun + bash. No Python. No pip. No npm install of untrusted packages in the critical path.
MCP: Agence exposes itself as an MCP server (10 tools, 3 resources) so any MCP-compatible client can use agence's governance layer. Agence also acts as an MCP client β consuming tools from external MCP servers. See MCP.md for integration guide.
| Prefix | Mode | Example | Use When |
|---|---|---|---|
| (none) | Chat | agence "explain this error" | Advice, explanation, Q&A |
^ | Knowledge | agence ^save, agence ^lesson | Shared state, knowledge ops |
~ | Private | agence ~note "idea" | Private notes (never committed) |
+ | Autonomous | agence +refactor-auth | Agent plans & executes a task |
/ | Validated | agence /git-status | Pre-approved safe commands |
! | System | agence !ralph, agence !claude | Launch agents or tools |
@ | Route | agence @sonya "review this" | Send to specific agent |
| Agent | Type | Best For |
|---|---|---|
@ralph | Loop | Autonomous iteration with backpressure |
@sonya | Persona | Architecture, code review |
@claudia | Persona | Deep reasoning, critical decisions |
@chad | Persona | DevOps, infra, CI/CD |
@aleph | Persona | Red team, security analysis |
@claude | Tool | Claude Code CLI (headless spawn) |
@aider | Tool | Code patches, git diffs |
@pilot | Tool | GitHub Copilot CLI |
@peers | Ensemble | 3-LLM weighted consensus |
@pair | Ensemble | 2-LLM lightweight consensus |
Override models with dot-notation: @ralph.gpt4o, @sonya.opus, @ralph.aider
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/agence)<a href="https://allmcps.com/mcp/agence"><img src="https://allmcps.com/api/badge/agence?style=directory" alt="Agence on AllMCPs" /></a>